CVE-2017-15354: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-17299: Improper Input Validation

Huawei AR120-S V200R006C10, V200R007C00, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C02, AR1200-S V200R006C10, V200R007C00, V200R008C20, AR150 V200R006C10, V200R007C00, V200R007C02, AR150-S V200R006C10, V200R007C00, AR160 V200R006C10, V200R006C12, V200R007C00S, V200R007C02, AR200...

CVE-2017-15355: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

CVE-2017-15356: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei DP300, V500R002C00, RP200, V600R006C00, TE30, V100R001C10, V500R002C00,V600R006C00, TE40, V500R002C00, V600R006C00, TE50, V500R002C00,V600R006C00, TE60, V100R001C10, V500R002C00, V600R006C00, TX50,V500R002C00, V600R006C00 have a buffer overflow vulnerability. An attacker may send specially...

PT-2018-6438

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 Huawei RP200 versions V500R002C00, V600R006C00 Huawei TE30 versions V100R001C10, V500R002C00, V600R006C00 Huawei TE40 versions V500R002C00, V600R006C00 Huawei TE50 versions V500R002C00, V600R006C00 Huawei TE6...

PT-2018-5801

Name of the Vulnerable Software and Affected Versions: Huawei DP300 versions V500R002C00 through V600R006C00 Huawei RP200 version V500R002C00 Huawei RSE6500 version V500R002C00 Huawei TE30 versions V100R001C02 through V100R001C10 Huawei TE30 version V500R002C00 Huawei TE30 version V600R006C00...

PT-2018-6443

Name of the Vulnerable Software and Affected Versions: Huawei smartphones with software BTV-DL09C233B350 Huawei smartphones with software Berlin-L21HNC432B360 Huawei smartphones with software Berlin-L22HNC636B360 Huawei smartphones with software Berlin-L24HNC567B360 Huawei smartphones with softwa...

PT-2018-3789

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.32 PHP versions 5.6.x prior to 5.6.18 PHP versions 7.x prior to 7.0.3 Description The issue arises from insufficient input validation in the stream get meta data function, allowing an attacker to control the return...

PT-2018-8619

Name of the Vulnerable Software and Affected Versions: Cisco UCS Central Software versions prior to 2.01c Description: A vulnerability in the operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to insufficient validation of input data, allows a malicious actor to execute commands with root privileges remotely.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute commands with root privileges...

PT-2018-3794

Name of the Vulnerable Software and Affected Versions Yandex Browser versions prior to 16.9.0 Description The issue allows remote attackers to spoof the address bar. This is due to insufficient input validation, which can be exploited by a remote attacker to modify the address bar value using the...

CVE-2017-12307

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

CVE-2017-12307: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input...

PT-2018-5385

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 300 Series Managed Switches affected versions not specified Cisco Small Business 500 Series Stackable Managed Switches affected versions not specified Cisco 350 Series Managed Switches affected versions not specified Cisc...

CVE-2017-15318

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

Design/Logic Flaw

RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE60 V100R001C10, V500R002C00, V600R006C00 have an out-of-bounds read vulnerabilities in some Huawei products. Due to insufficient input validation, a remote...

Input validation

AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30; AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

PT-2017-13999

Name of the Vulnerable Software and Affected Versions Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 Huawei smartphones with software of BGO-L03C331B009CUSTC331D001 Description The issue is due to insufficient input validation, which can be exploited by an attacker sending...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to display a custom interface in a tab that is not controlled by the hacker.

The vulnerability of Google Chrome’s Blink rendering module is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to display a user interface in a tab that the attacker does not control, using a specially crafted HTML page...

Security Advisory - DoS Vulnerability in Some Huawei Smart Phones

Some Huawei smart phones have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within radio range by special wireless device. Successful exploit could make the smart phone restart...